CVE-2026-124833criticalCWE-434

CVE-2026-124833: critical vulnerability in Ahime Image Printer

Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload

Published

Follow this CVE+ Monitor Ahime Image Printer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8
The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Unknown · Ahime Image Printer